The version of python3 installed on the remote host is prior to 3.9.16. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-341-01 advisory.

  - In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands     discovered in the system mailcap file. This may allow attackers to inject shell commands into applications     that call mailcap.findmatch with untrusted input (if they lack validation of user-provided filenames or     arguments). The fix is also back-ported to 3.7, 3.8, 3.9 (CVE-2015-20107)

  - The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer     overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties.
    This occurs in the sponge function interface. (CVE-2022-37454)

  - Python 3.9.x and 3.10.x through 3.10.8 on Linux allows local privilege escalation in a non-default     configuration. The Python multiprocessing library, when used with the forkserver start method on Linux,     allows pickles to be deserialized from any user in the same machine local network namespace, which in many     system configurations means any user on the same machine. Pickles can execute arbitrary code. Thus, this     allows for local user privilege escalation to the user that any forkserver process is running as. Setting     multiprocessing.util.abstract_sockets_supported to False is a workaround. The forkserver start method for     multiprocessing is not the default start method. This issue is Linux specific because only Linux supports     abstract namespace sockets. CPython before 3.9 does not make use of Linux abstract namespace sockets by     default. Support for users manually specifying an abstract namespace socket was added as a bugfix in 3.7.8     and 3.8.4, but users would need to make specific uncommon API calls in order to do that in CPython before     3.9. (CVE-2022-42919)

  - In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in     XML_ExternalEntityParserCreate in out-of-memory situations. (CVE-2022-43680)

  - An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path     when processing some inputs to the IDNA (RFC 3490) decoder, such that a crafted, unreasonably long name     being presented to the decoder could lead to a CPU denial of service. Hostnames are often supplied by     remote servers that could be controlled by a malicious actor; in such a scenario, they could trigger     excessive CPU consumption on the client attempting to make use of an attacker-supplied supposed hostname.
    For example, the attack payload could be placed in the Location header of an HTTP response with status     code 302. A fix is planned in 3.11.1, 3.10.9, 3.9.16, 3.8.16, and 3.7.16. (CVE-2022-45061)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Slackware Linux 15.0 / current python3 Multiple Vulnerabilities (SSA:2022-341-01)

critical Nessus Plugin ID 168483

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.6 Sep 20, 2023, 4:09 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202309201609
Version 1.5 Mar 6, 2023, 6:10 PM IAVM reference Plugin Feed: 202303061810
Version 1.4 Feb 3, 2023, 2:05 PM IAVM reference Plugin Feed: 202302031405
Version 1.3 Feb 3, 2023, 12:10 PM IAVM reference Plugin Feed: 202302031210
Version 1.2 Dec 8, 2022, 1:56 AM New Plugin Feed: 202212080156